CVE-2026-45581 | Medium | 5.5 | 2026-06-08 | fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is… |
CVE-2026-41586 | | | 2026-05-07 | Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26, C… |
CVE-2025-30147 | | | 2025-05-07 | Besu Native contains scripts and tooling that is used to build and package the native libraries used by the Ethereum client Hyperledger Besu. Besu 24.7.1 throu… |
CVE-2024-45244 | Medium | 5.3 | 2024-08-25 | Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window. |
CVE-2024-22192 | Medium | 6.5 | 2024-01-16 | Ursa is a cryptographic library for use with blockchains. The revocation scheme that is part of the Ursa CL-Signatures implementations has a flaw that could im… |
CVE-2024-21670 | Medium | 6.5 | 2024-01-16 | Ursa is a cryptographic library for use with blockchains. The revocation schema that is part of the Ursa CL-Signatures implementations has a flaw that could im… |
CVE-2022-31021 | Low | 3.3 | 2024-01-16 | Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is not mitigated in the Ursa and AnonCreds… |
CVE-2024-21669 | Critical | 9.9 | 2024-01-11 | Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments… |
CVE-2023-46132 | High | 7.1 | 2023-11-14 | Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" results in a mol… |
CVE-2022-45196 | High | 7.5 | 2022-11-12 | Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOT… |
CVE-2022-36025 | Critical | 9.1 | 2022-09-24 | Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Types. An e… |
CVE-2022-31006 | High | 7.5 | 2022-09-09 | indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an att… |
CVE-2022-31020 | High | 8.8 | 2022-09-06 | Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the `pool-upgrade` request hand… |
CVE-2022-36023 | High | 7.0 | 2022-08-18 | Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application… |
CVE-2022-31121 | High | 7.5 | 2022-07-07 | Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an orderer… |
CVE-2021-41272 | High | 7.5 | 2021-12-13 | Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the intr… |
CVE-2021-21369 | Medium | 6.5 | 2021-03-09 | Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. In Besu before version 1.5.1 there is a denial-of-service vulnerabilit… |
CVE-2020-11093 | High | 7.5 | 2020-12-24 | Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there… |
CVE-2020-11090 | High | 7.5 | 2020-06-11 | In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed… |
CVE-2018-3756 | High | 7.5 | 2018-06-01 | Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block valid… |